PT-2021-30785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to the net/mlx5e module in the Linux Kernel. It involves the removal of a debug pointer in the mlx5 debug cq remove function. The actual impact and attack plausibility hav...

PT-2021-26755

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.75 through 5.10.81 Description: A potential issue exists in the net/mlx5e component, where the cq-dbg pointer is not properly nullified in the mlx5 debug cq remove function. The actual impact and attack plausibility...

PT-2021-30750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.75 through 5.10.81 Description A potential issue exists in the net/mlx5e module, specifically in the mlx5 debug cq remove function, where the cq-dbg pointer is not properly nullified. The actual impact and attack...

PT-2021-24286

Name of the Vulnerable Software and Affected Versions: rust-embed crate versions prior to 6.3.0 Description: The issue allows attackers to read arbitrary files in the file system if they have control over the filename given, specifically when running in debug mode and the debug-embed feature is n...

PT-2021-26790

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a potential security vulnerability in the net/mlx5e module. It involves the nullification of the cq-dbg pointer in the mlx5 debug cq remove function. The actual impac...

OESA-2021-1443 golang security update

The Go Programming Language. Security Fixes: ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.CVE-2021-41771...

D-Link DWR-932C E1 Router debug_fcgid Arbitrary Command Execution

The vulnerability of the debugfcgid component in the D-Link DWR-932C E1 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

CVE-2021-42784

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

D-Link Dwr-932C E1: Operating System Command Injection Vulnerability

The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...

libdwarf security vulnerabilities

libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in libdwarf. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-1105

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...

CVE-2021-1088

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control, which may lead to information disclosure...

CVE-2021-1105

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...

Information disclosure

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...

CVE-2021-1105

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to information disclosure...

CVE-2021-1105

CVE-2021-1105 affects NVIDIA GPU and Tegra hardware, stemming from a vulnerability in the internal microcontroller that could allow a user with elevated privileges to access debug registers at runtime, potentially leading to information disclosure. Connected documents corroborate that the impact ...

CVE-2021-1088

Summary: CVE-2021-1088 affects NVIDIA GPU/Tegra hardware via an internal microcontroller vulnerability that may allow a user with elevated privileges to exploit debug mechanisms with insufficient access control, potentially leading to information disclosure. The CVE applies to multiple NVIDIA arc...

NVIDIA GPU security vulnerabilities

Nvidia Gpu is a graphics processing unit from the American company Nvidia. It is used in machine learning, video editing and gaming applications. A security vulnerability exists in NVIDIA GPUs and Tegra hardware that originates from a user with elevated privileges accessing debug registers at...

PT-2021-13495

Name of the Vulnerable Software and Affected Versions NVIDIA GPU and Tegra hardware affected versions not specified Description The issue concerns a vulnerability in the internal microcontroller of NVIDIA GPU and Tegra hardware. This vulnerability may allow a user with elevated privileges to acce...

PT-2021-8224

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-syzk 1 Description The vulnerability is related to a stack out-of-bounds error in the scsi debug component of the Linux kernel. The issue arises from the use of the min t function with a type of int instea...